$ rpki-client -vvf rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft File: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft (raw, json) Hash identifier: QPoIknWP9yDGftdc0x/b2F7JKPv1lcSXiU7l0aEHKfg= Subject key identifier: 10:41:24:A9:D0:61:26:AC:29:13:C8:CB:17:5A:23:A8:E2:10:E6:EA Authority key identifier: 73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 Certificate issuer: /CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Certificate serial: 3A283FBA74AD16928A9B523D146B2554E10A9706 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 22:23:51 +0000 Manifest this update: Mon 20 Jul 2026 22:18:51 +0000 Manifest next update: Tue 21 Jul 2026 23:06:51 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32332d3233203d3e20313430343137.roa (hash: +l7H6IXgAvTv+3glkvk8VLjCw4Za7qX1HwAcAg3brR0=) 2: 731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl (hash: 1qsgwaaBLMiEaleEdlDG+Lz6+MRjUsTVD2RDxOXdIJE=) 3: 3130332e3135312e3134302e302f32332d3234203d3e20313430343137.roa (hash: J0CxZDsJ9hK/vFJkCmlYVTK0Hkphd/z0nczFHp0XF3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:28:3f:ba:74:ad:16:92:8a:9b:52:3d:14:6b:25:54:e1:0a:97:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731D5D59A9238F79E8E4540B7BF8839F824AA2E6 Validity Not Before: Jul 20 22:18:51 2026 GMT Not After : Jul 21 23:06:51 2026 GMT Subject: CN=104124A9D06126AC2913C8CB175A23A8E210E6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:67:c9:b1:db:da:1e:e5:b7:35:d1:d6:38: 1f:99:13:9c:93:f6:f0:a6:87:ee:11:9d:24:a5:9e: e3:ea:b6:63:ae:c0:fd:5e:dd:3a:d0:20:7e:85:c1: 9a:60:f5:14:17:c1:3d:66:b9:b7:02:c0:1d:75:87: bc:d2:3c:d0:40:58:10:04:8f:f9:55:ff:9c:cc:7f: 65:48:ab:5e:2d:1d:4b:81:ef:ce:ad:49:14:94:0d: 05:c4:9b:65:26:b7:1e:f5:24:2d:84:27:36:ab:43: 84:ce:68:8f:41:1d:34:5e:d7:75:ed:f8:3d:01:7d: 48:0d:39:98:8c:52:0c:1e:37:61:bd:a9:65:f2:3f: af:6d:73:d0:a7:d9:82:6c:89:0a:72:71:17:c1:04: 2b:3a:8f:b9:80:b6:3b:76:e8:07:21:40:79:92:f3: f9:dd:9b:74:3f:56:4e:16:ff:64:c3:0b:dd:88:34: b0:15:88:72:ed:08:17:85:fa:a4:50:13:e9:36:08: 3a:ff:ab:73:4e:54:bf:8a:6a:b9:67:24:5b:c0:35: 09:99:d2:c3:a7:4d:53:42:74:22:45:07:04:0a:7d: 9d:b7:d1:3c:1e:35:8e:e5:b7:f3:a0:38:5b:dc:1c: ed:c9:5c:d6:b4:5f:03:23:ac:a6:ed:a7:17:71:66: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:41:24:A9:D0:61:26:AC:29:13:C8:CB:17:5A:23:A8:E2:10:E6:EA X509v3 Authority Key Identifier: keyid:73:1D:5D:59:A9:23:8F:79:E8:E4:54:0B:7B:F8:83:9F:82:4A:A2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/731D5D59A9238F79E8E4540B7BF8839F824AA2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:71:2a:40:2f:a3:c6:e6:b6:81:82:ea:36:9a:d6:1f:13: f6:d6:d8:1b:42:50:01:da:7d:e4:6a:9d:e7:9e:f3:bf:d3:9b: 1a:17:0a:c2:ba:cc:87:ee:2a:ce:2f:48:85:07:5d:0e:ea:14: 2f:dd:7b:12:14:66:51:30:c2:3e:3d:c5:90:03:a5:12:4c:80: b5:45:77:2a:67:97:94:64:d7:b2:6f:54:3a:aa:2f:87:c0:91: 06:5e:17:c8:34:ad:9e:a6:35:63:87:db:1a:50:86:19:ec:23: f8:17:58:39:58:cc:7a:dc:86:c7:39:9d:1f:30:6d:30:b9:ee: ce:48:60:39:f7:5f:26:80:27:d9:2f:d5:7e:99:0a:14:9e:7d: c0:3e:4e:59:e2:77:a5:7f:4b:49:3e:92:6a:29:fe:89:05:6e: 82:3c:ce:62:7f:97:e5:68:6a:8b:ec:d0:3a:81:6d:e0:80:42: 76:f9:6e:44:51:c1:f8:6f:93:26:7b:83:cb:4c:1d:58:b3:a6: e7:88:d3:27:1f:4b:0e:37:ef:35:56:91:c0:d8:1a:7c:5b:99: 8f:d6:37:5c:d3:49:0a:0d:9a:2f:6b:f3:93:92:0e:ce:96:40: 5a:4b:23:f6:f7:40:fd:84:02:eb:c7:e5:c6:e1:bd:33:2d:fb: 5e:a3:e0:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOig/unStFpKKm1I9FGslVOEKlwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4 MjRBQTJFNjAeFw0yNjA3MjAyMjE4NTFaFw0yNjA3MjEyMzA2NTFaMDMxMTAvBgNV BAMTKDEwNDEyNEE5RDA2MTI2QUMyOTEzQzhDQjE3NUEyM0E4RTIxMEU2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC02fJsdvaHuW3NdHWOB+ZE5yT 9vCmh+4RnSSlnuPqtmOuwP1e3TrQIH6FwZpg9RQXwT1mubcCwB11h7zSPNBAWBAE j/lV/5zMf2VIq14tHUuB786tSRSUDQXEm2Umtx71JC2EJzarQ4TOaI9BHTRe13Xt +D0BfUgNOZiMUgweN2G9qWXyP69tc9Cn2YJsiQpycRfBBCs6j7mAtjt26AchQHmS 8/ndm3Q/Vk4W/2TDC92INLAViHLtCBeF+qRQE+k2CDr/q3NOVL+KarlnJFvANQmZ 0sOnTVNCdCJFBwQKfZ230TweNY7lt/OgOFvcHO3JXNa0XwMjrKbtpxdxZiLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEEkqdBhJqwpE8jLF1ojqOIQ5uowHwYDVR0j BBgwFoAUcx1dWakjj3no5FQLe/iDn4JKouYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDQ3MDI2YTktMGM5YS00ZDc5LWFkNjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlB OTIzOEY3OUU4RTQ1NDBCN0JGODgzOUY4MjRBQTJFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MzFENUQ1OUE5MjM4Rjc5RThFNDU0MEI3QkY4ODM5RjgyNEFB MkU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvNzMxRDVENTlBOTIzOEY3OUU4RTQ1NDBCN0JGODgz OUY4MjRBQTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIc1cSpAL6PG5raBguo2mtYfE/bW2BtCUAHa feRqneee87/TmxoXCsK6zIfuKs4vSIUHXQ7qFC/dexIUZlEwwj49xZADpRJMgLVF dypnl5Rk17JvVDqqL4fAkQZeF8g0rZ6mNWOH2xpQhhnsI/gXWDlYzHrchsc5nR8w bTC57s5IYDn3XyaAJ9kv1X6ZChSefcA+Tlnid6V/S0k+kmop/okFboI8zmJ/l+Vo aovs0DqBbeCAQnb5bkRRwfhvkyZ7g8tMHVizpueI0ycfSw437zVWkcDYGnxbmY/W N1zTSQoNmi9r85OSDs6WQFpLI/b3QP2EAuvH5cbhvTMt+16j4OI= -----END CERTIFICATE-----Generated at Tue Jul 21 08:21:40 2026 by rpki-client